yashsingh1/xdaforums huggingface dataset:
[Other SmartWatches] hylo_:
Hi everyone, Golem_.

I have a 2nd gen IWO and the 1st gen one is coming.

My main target is hacking 2nd gen while I'm playing with 1st gen.

Although I've followed up most of the posts here, since I don't have 1st gen at hand, I have little practical knowledge here.

Barring that, I'm also new to this platform.

Anyway, as far as I understand, the readback for 2nd gen is blocked due to the absence of scatter file.

But how did you get the scatter file for the 1st gen in the first place? Was it leaked from the manufacturer? Someone made it manually from the info that's not public?

or is it possible to generate it from some information obtained from the device?

and what's the possible harm do you think if I just use random scatter file, for example, the one made up by myself, for the watch?

Could it become a unrecoverable brick?

Thanks.
[Other SmartWatches] Golem_:
even though I did the mod I do not own this watch - tell me more about that butterfly

---------- Post added at 11:51 AM ---------- Previous post was at 11:47 AM ----------

My friend, we cannot access the IWO 2nd gen due to the lack of a usb data connection.

Scatter file is not a problem as long as mtk has standardized configuration
[Other SmartWatches] hylo_:
What about this? :confused:

He had made a stable USB cable and he mentioned that he couldn't readback the firmware because of the wrong scatter file.
[Other SmartWatches] nooficial:
The manufacturer shiningintl & the iwo 2nd brick

Hello to all owners of an iwo 2nd with problems !!!

On the page of the manufacturer shiningintl http://www.shiningintl.com/supports/the-secret-you-may-not-know-about-2nd-iwo-smart-watch/

I left a post (require approval by the moderator) to see if they give us a solution to the Hard Rest by buttons and / or the possibility to update the firmware By OTA.

Anyone who wants can put pressure :good: :

- Leaving a Post on the Web

http://www.shiningintl.com/supports/the-secret-you-may-not-know-about-2nd-iwo-smart-watch/

- You can used a Hastag #iwobrick twitter acoount: [MENTION=240871]shining[/MENTION]int https://twitter.com/shiningintl

- This is shiningintl Facebook https://www.facebook.com/shiningintl/

(Anyway they seem to have little movement)
[Other SmartWatches] HoleyHouseOfAir:
Makibes Wear HR

Hello All, particularly Golem,

I recently got a makibes wear hr for christmas and want to mess about with it, I dumped the rom using a scatter file for the dz09, and hunted through the binary for any trace of image files, I have attached all the files I have managed to extract filedropper .com/firmwareextractedfiles, I think the png and the elf files make the animated watch faces, but I haven't the foggiest where to begin creating my own to replace them, I also want to find image files for the watch faces so I can replace them with my own, but have been unable to find them, can you suggest advice?

I also would like to understand how applications fit in, I have done a rom dump, before and after installing a yahoo weather app, and can see basic things, has managed to create their own apps yet?

this blog post describes how the MT6260 could be reverse engineered and used on a dev board to run a basic operating system, bunniestudios .com /blog/?p=4297 , I was wondering whether it would be possible to take the rom dumps from our devices, use an arm5 dissasembler/emulator to emulate/observe how to access the hardware, then compile our own code to run on the devices, any chance of this?

I have learned alot in the last few days and found it very interesting, my goal is to write my own operating system for my watch,

Regards,

Charly

p.s. I had issues with (i think) the watch booting a charging program after connection to charger which stopped the mtk port, with flashtools I had to set up the operation, then connect the watch so it could engage the com port before the watch could start anything else, in cases where an operation failed the watch remained unresponsive for a few minutes till i assume it went back to its regular programming
[Other SmartWatches] Golem_:
He didn't know how to manage the scatters so to make it work - he made what he could

---------- Post added at 07:01 PM ---------- Previous post was at 06:22 PM ----------
[Other SmartWatches] Golem_:
Hi Charly, have attached a list with all graphic media included in your FILE_01_mtk. I'm totally sure that once you'll do a brief check you'll understand the structure of the new mediatek formats - are they decodable? I was able to do it for 6 or 7 types then I got bored :)) Hope you are more resilient and do a universal graph replacer app

https://drive.google.com/file/d/0B_PhIaLE_-ogeTBEdGhpUmlkbkU/view?usp=sharing
[Other SmartWatches] HoleyHouseOfAir:
I saw you had problems uploading the file :P, thanks for that, genuinely thankful, at least i can modify how it looks for the time being, how did you identify all the image locations?,

how did you go about reverse engineering similar chipsets?

do you think it is feasible i could execute my own code after learning what opcodes i can use to access hardware?
[Other SmartWatches] Golem_:
I did a small app for that, to identify the pictures - if you check side to side the list and your file you'll figure it out in minutes

Not feasible at all
[Other SmartWatches] HoleyHouseOfAir:
where can i get the app?

why not? i just want to understand, from what i can see they are executing arm instructions, can it not be disassembled to find out what memory addresses are mapped to hardware pins, and the general structures required to communicate with the hardware? from there why cant compiled arm5(??? think its tej for 2502c) making use of those memory addresses be able to turn the watch into a development platform?
[Other SmartWatches] Golem_:
man, please, the app consists in few lines of code you can write by yourself in 2 minutes

I'm not a programmer or something ( AT ALL ) but I met very capable guys who tried to do that - by my opinion there is a lot to study and for sure this task requires a very extensive team in order to create an OS or to modify the existent one - don't get me wrong - hope you are the one gets it
[Other SmartWatches] HoleyHouseOfAir:
I'm having some problems with the files you linked to in the code, i cannot understand the format structure, for example file 177 you linked

00 34 01 seems to be the file signature of whatever format this is

6C 10 00 i cant work out what this is

F0 00 = 240

0F what is this?

F0 00 = 240

0F again what is this

bits after

73 2B 3B 6F 13 31 00 92 = file 116

73 31 33 6E 13 36 00 5F = file 117

74 38 2D 6E 13 39 00 87 = file 118

75 3F 27 6D 13 32 00 9E = file 119

any idea on what file format this is?

also at position 625c6f i found "rasscumnobtityidanalarse****coonfarthomoknobmongmuffpakipuffshagshattarttoketossfreakhomosmoron*****pervert" (separating ASCII characters not compatible with this forum) is this normal for these devices? what the hell are these words doing here? is this a tasteless joke on behalf of some bored programmer?
[Other SmartWatches] Golem_:
I laughed crazy my friend :)))))))) great discovery - you've got the point, some chinese guys exercising their dirty slang :)))))

so first two bytes are a flag for mtk picture has to come, next 3 are about the size in little endian style, the next 3 are the picture width and height in pixels (each parameter has 3 bites - scarce stuff... so there we have from left to right 3 bytes hence 6 bites - 6 positions, a b c d e f then width is d a b and height is e f c) then is coming the picture itself with same 3 bytes (it works just for mtk pictures) then the next five bytes are the code of the format - the size counts from where I said that the picture is coming - thought you'll figure it out just comparing a bit the table I've sent and the firmware file you have

update: pictures start with 34 01 not with 00 34 - I advice you to use hex editor neo
[Other SmartWatches] juanchurry:
noofficial we go to iwo 2 to send messages as nooficial tells us to ignore us and nothing to fill the message page to demand that we give the same as iwo 2 and do not forget the buyers. I've already started.

http://www.shiningintl.com/supports/...o-smart-watch/
[Other SmartWatches] muneebhassan19:
Golem i have this watch with W300GG_02C_WATCH_INT_UV_02_160218 firmware and have gone through every video there is on youtube but can not find the solution to the problem which is that whenever i apply the code *#2015*# nothing happens i need the apple logo badly...

Please HELP!!!

Thankyou
[Other SmartWatches] Golem_:
Why you'd use a code when you can upload that logo inside the firmware? Get a 160218 firmware, use MTK Res (you find here), open the firmware, download from firmware the apple logo then upload it back in the firmware instead the annoying chinese logo, save it then flash it in your watch and TADA!
[Other SmartWatches] hylo_:
Hi, all.

I've got my 1st gen IWO watch.

I extracted firmware and exchanged few gifs.

I have so many questions.

Could someone elaborate what these files for?

EXT_BOOTLOADER, INT_BOOTLOADER: I know I shouldn't touch these, but I wonder why there are two bootloaders.

FILE_01_mtk: system partition? Includes watch faces, sound files, fonts?

FILE_02_mtk: user space partition? Downloaded app goes here? does it contain user settings?

And golem, I have a question about MOD.

The firmware I extracted(160428) seemed very few replaceable gifs on MTK Res program. Moreover, none of them was watch face.

One of the modified firmwares on the shared Google Drive archive, with same version(160428), I can see a lot of gifs on the program, including all the watch faces.

Did you do "MOD" on the firmware so you made a lot of gif slots available for replace?

An intact firmware doesn't reveal its watch faces on MTK Res program?

Thank you in advance.

P.S. I just spotted the difference why MTK Res not catch the gif.

In an intact firmware it starts with 03 01 not 34 01.

Are you aware of this 03 01 file signature?
[Other SmartWatches] nooficial:
To rescue the creation of the usb cable for the iwo 2 by Max Mughal:

https://onedrive.live.com/?authkey=!AADrGpg7_zRV7JE&id=E640A0AA35E88101!164&cid=E640A0AA35E88101

You think that with the cable you would have some option that you know to reset it?

Thank you
[Other SmartWatches] giogio013:
IWO gen 2

hi. have problem with my watch. it dont charge whit wirless charger. how can i fix it???
[Other SmartWatches] Golem_:
I have explained here somewhere whole mechanism about watch skins and how it works in very deep details

PS - 03 01 or 34 01 (and way lot of other types) are just a small part of the signature - search about my explanations about all these

03 01 is part of the signature for one of hundreds of type of media mtk files

34 01 is part of a gif signature
[Other SmartWatches] hylo_:
Thank you very much. :) I got it. So it's their own file signature and just one of hundreds of their media file type.

I tracked down the MTK Res program, it was built on around 2008. Archaic. So it doesn't recognize (...) 00 34 file type.

Maybe we need a new program that could substitute MTK Res. It doesn't even detect font files in the firmware.

Barring the mtk file signature, there are still hundreds of files whose contents are compatible with the platform we use, I believe.

I looked into the font files(ttf, otf) inside the firmware and I found it. They use a font from the Chinese font company called "ETrump" (www etrump net)

They're saying it's specially designed for embedded platform considering the capacity limitation. (Chinese takes up a lot of space).

Anyway, other languages than Chinese also use a font file from the same company, I checked Thai.

Their structure is little different from usual ttf file, but I can see it still maintaining a similar TrueType structure.

I cut that part from the firmware and try to open in Windows, but it was not successful.

Maybe it's an endian issue because unicode is bigger than a byte.

I'll look into that again later when I have time.
[Other SmartWatches] BandarGadget:
hi Golem, I read the instructions and follow the step to flash the watch over and over again, but when i want to flash it always stuck to searching the device. but actualy my pc read the device but the flashtool always searching. what I miss? i'm using W7, full battery and turn off the smartwatch

please help me :(

thank you so much all
[Other SmartWatches] Golem_:
did you follow this algorithm?
[Other SmartWatches] BandarGadget:
sure, i'm follow the same algorithm. but, the flashtool doesn't like find the smartwatch. it always searching

actually, i get the watch latest version. the watch face had the butterfly on the watch face without input the code. and if I input code *#2015*# there's nothing happen.
[Other SmartWatches] Golem_:
some guys had troubles with the cable...
[Other SmartWatches] BandarGadget:
I'm already fix the cable issue...thank you golem
[Other SmartWatches] gtMARK989:
Hello, Golem! I tried to update my watch's firmware (MTK2502c) and when the update was at 85% I accidentally unplugged my watch. Now it won't turn on, and my computer doesn't recognize it. Did I brick it? What should I do?
[Other SmartWatches] Golem_:
there is no reason to not recognize your watch - the modem doesn't depend on firmware
[Other SmartWatches] gtMARK989:
Thanks, but I can't turn on my watch. That's my main problem. And I think I bricked it.
[Other SmartWatches] Golem_:
I repeat, the modem for computer connection has no link with the firmware - to read the memory you doesn't have to switch on
[Other SmartWatches] gtMARK989:
OH! Okay now I understand what are you trying to say :)

I managed to turn on my watch and I updated it. Now it's working! Thank you! I appreciate it! :D

---------- Post added at 03:36 PM ---------- Previous post was at 03:28 PM ----------

Can you give me the latest firmware for this watch?
[Other SmartWatches] Denfic:
Hi .. i am new in smart watch world .. but i have a Chinese Mifree Q8 ... with that same processor/chip ? the MTK2502C .. But i cannot connect or download Faces with Android Wear .. Or other Face apps on playstore to change a clock face .. can you help me with this ?? I would like to know how to change the look of the watch .. :) Some Specs >>

Form :Sport style Ourdoor Round SmartWatch

Dimension: 54mm x 48mm x 14mm

Color :Black, Orange, Blue, Camouflage color

Parameters:

Platform:MTK2502C Support iOS and Android

OS:Nucleus

LCD:1.22" IPS 240*204 pixel Round display

Link to watch >> https://www.aliexpress.com/store/product/Mifree-Q8-Outdoor-Sports-Smart-Watch-Bluetooth-4-0-MTK2502C-Heart-Rate-Monitor-Activity-Tracker-Remote/1086467_32724599982.html

Ps: I already downloaded spflashtool , and MediaTek USB VCOM drivers( I cannot seem to install the drivers ) And yeh i am on W10 .. can you tell me how to make that work ?? I just do not get the part where its askin (spflashtool) for scatter file .. just don`t get it or have it ??
[Other SmartWatches] Golem_:
spflash tool is not working for Nucleus - here you'll find anything you need in order to extract your firmware (is a must to have a backUP) or flash something in your watch
[Other SmartWatches] Denfic:
Ahh oke ... so thats why it does not work ... hmzz .. its a bit different than flashing phones ... it seems .. hahah .. Oke i downloaded all the files from the site you gave me .. i have the tools rar and the files for my watch .. mtk2502c .. i will install the tool and try to make a backup .. those files in the other file with (IWO).. are those all firmwares ?? If so can you tell me wich one is the best or nice .. The file Full MOD .. what exactly is that ?? I just want to change the look of watch with faces, and i see a file with faces ... thats good news .. but i do not exactly know what to do .. I have seen many messages of you around the internet .. and i think you know best .. so before doing anything .. i ask you ..if you don`t mind .. ;)

Tried to make some backup .. installed the drivers (on the w10 way) .. but when i open the tool it does not recognize the watch .. the watch is off .. and when i connect it to pc .. and open the tool .. it does nothing ??
[Other SmartWatches] Golem_:
Don't try t flash anything before you sure you did a full backup of yur own firmware

not sure if those firmware will work for your watch, use them as scatter - once you extract your firmware you can operate watchskins changes

full mod -modifications i made to those firmwares in order t make watchfaces visible

when you press readback it does nothing?
[Other SmartWatches] Denfic:
No i do not install/flash anything .. before making a backup .. i will try to push the readback ..and i will reply back to you .. !

Anyway thanx for trying to help me with this .. !

Tapping the readback button .. and i get a string\rule Read flag = n/a Adress 0x000000000 and 1 more .. File = ROM_0 Is this oke or .. ??

In the Download section i get Parameter > OTP String 0x000000000 OTP_WRITE ..
[Other SmartWatches] fingalo:
Making watch apps

Hi,

I have done a watch vxp app, based on the hello world app.

It is a rather simple analog watch and it can show year, month, date and battery level plus my user drawn handles. I tried to use png files but the rotate function in the library only rotate in 90 degrees steps.:(

From code I have also tested to popup the phone dialer, make a call and send a sms to a phone number.

I could also display bluetooth power status (on/off). All tested on my GT88, the only watch I currently have that can run vxp apps.

I would like to publish my work but I cannot as a new user no attachments, no link, no pictures:confused:

I need a new watch that can access GPRS with built in browser and can run vxp apps. With such a watch it may be possible to access http from code. Hopefully the GT08 I have ordered can be used for that purpose.

Anybody out there that has done similar kind of tests in vxp apps?
[Other SmartWatches] Golem_:
any watch 6260A 128M nor flash, 2502A 128M and 2502C 64M are able to run vxp
[Other SmartWatches] hylo_:
Hi, nice to meet you.

I've also been poking around vxp apps. Hello world and watch faces.

Checkout "watch faces vxp files" thread here.

I built and tested several watchfaces by tweaking hello world app modifying resources especially 'configtbl.bin'.

As far as I know, watchface apps cannot display battery level and have many limitations because it exploits built-in watchface mechanism inside hte OS that we cannot modify currently.

And I found IWO 1st gen does not support these watchfaces fully. (they go wrong after LCD is off)

So, presumably, you've built plain vxp apps which we ought to launch by clicking it in the menu.

Still, it would be a great help here if you share your work. :)

There are many ways to share.

URL link is also possible if you split it into several parts so we cannot click to open it directly.

If you search few pages, you can find examples.
[Other SmartWatches] Smith 001:
Vxp face is also a vxp app, right?
[Other SmartWatches] fingalo:
Thank's for the info!

I'm trying to find a supplier who can deliver what is advertised with correct processor and memory size, I have ordered DZ09 and GT08.

I just wait and see what is arriving.
[Other SmartWatches] Golem_:
cancel your order, there is no more gt08 and dz09 (real ones)
[Other SmartWatches] hylo_:
Thanks for sharing:good:

I don't have my watch right now, so I haven't tested it.

According to your BuildApp.bat, you're using MDK SDK v3.0.

Did you write that script by yourself?

That must've been a lot of work, figuring out parameters for the linker and compiler, especially MTK-proprietary tools such as PackDigist.

I personally found a way to build vxp for MTK2502c based watches using LinkIt IDE, the up-to-date development environment provided by MTK.

You can use eclipse and all. Though it uses gcc instead of ADS, so the output binary is different unsing the same source code. But I checked I can still run the vxp app.

=======================

1. Install LinkIt Assist 2502 SDK along with eclipse C/C++.

2. Backup your LINKIT_ASSIST_SDK directory inside eclipse.(copy to LINKIT_ASSIST_SDK.bak)

3. replace all the contents in eclipse\LINKIT_ASSIST_SDK\lib\LINKIT10 with C:\Program Files\MRE SDK V3.0.00\lib\MRE20

(or MRE30 if you'd like to use 3.0)

4. Same method applies to include directory in LinkIt Assist SDK.
[Other SmartWatches] fingalo:
Hello, actually the project setup is a 'standard' vxp watcface 'hello world' project, as described by member zcj in the vxp watchfaces thread. All credit go there.

The buildapp.bat is made automatically when building the project by that procedure.

Very interesting info about LinkIt IDE and eclipse, sound as a nice standard way of working.

I continued to investigate the SDK and is now able to include the watch face handles (.png files) in my app and rotate them fully and create a watch with analog handles and also date and battery information. I found a simple rotate c code for bitmaps and got it to work.

The issues I have is that the rotate is only a pixel by pixel rotate so pictures are a bit jagged. And using these pictures in the app does reduce the color information so the antialiasing (I think that is the word) at the edges does not look good without editing the picture files. But I think with careful choice of watchface pictures it could be useful and rather nice looking.

I have seen in the system dump of the watch there i some calls like

vm_graphic_2d_linear_transform_rotate

which I believe is part of nice rotate function in the watch. Unfortunately I have not found any SDK or lib with those functions.

I will publish an example my project, when the code is stable. It is working but still some small issue to debug.
[Other SmartWatches] jahnclaude:
Mtk2502A

Hi there, I know this thread is about the Mtk2502C, But I've a 2502A... the A9 iWatch Clone

First of all really thanks Golem for your work with this devices, really good I was able to create a flushable rom of the stock FW with your tool and then flashed the libeled rom found in your repository, and it's the only one that works 100 percent even animated watch faces, that were not working with stock!

Btw I was wondering if it was possible to do a bit of modding, I'd like to do a couple of things:

1. Replace stock sounds

2. Replace stock icons

3. Replace stock Watchfaces and Wallpapers (I was able to do that with a modded firmware for the A9 in your repo, but with that fw animated faces are not working sadly)

4. Add the menu found in the mtk2502C variant (those with movable floating icons)

Is it possible?

Thanks again!

P.s.

I've a LG G Watch R too, and even if these device are cheaper, are really good, if the firmare was really optimized I bet these smartwatches could be a lot better!
[Other SmartWatches] Golem_:
1. I didn't dig for sounds by now - most probably it could be possible if I'd find the headers for these

2. it would require a lot of work but yes - it is possible

3. I do not own a A9 watch so I can't say I understand what about animated watch skins

4. that is requiring a new OS written from scratch :)
[Other SmartWatches] jahnclaude:
Thanks a lot for your quick answer!!

Ok so I could be pretty shure that I would never be able to get that menu... isnt there a way to extract it from a Mtk2502C Rom?

So is there anything I can do by myself without bothering you to understand how to replace stock sound icons and watchfaces?

Any link or guide?

Thanks again for your work and help!

P.s.

If you can take a look at the firmware, I'll be really happy!

Its called lideled it's in your mtk2502a repo!
[Other SmartWatches] Golem_:
lately somewhere around ( i don't remember where) I have explained everything in details for a curios user
[Other SmartWatches] jahnclaude:
I'm looking all around to find more, pretty nice stuff to learn!

If you find the links, please share them!

Did you took a look at that firmware?
[Other SmartWatches] dbroda235:
Hi Golem_

Are the tools and procedures also applicable to devices with 2503 SoC?